Technical Tip: How FortiGate calculates BFD timers...

fricci_FTNT · 03-03-2025

Description This article explains how to make sure that the GTP traffic hitting a specific firewall policy will not be inspected when a GTP profile is removed from a firewall policy. Scope FortiCarrier, GTP. Solution On FortiCarrier, when a GTP profi...

fricci_FTNT · 03-03-2025

Description This article clarifies that a FortiSwitch FS-M426E-FPOE does not support UPoE 802.3bt standard, and it is not able to provide full power to a FortiAP-431G through a single interface. Scope FortiSwitch FS-M426E-FPOE and FortiAP-431G, all f...

fricci_FTNT · 07-26-2024

Description This article describes how FortiGate blocks the TLS Encrypted Client Hello (ECH) and forces the end client to send the inner SNI in clear. When using the Encrypted Client Hello (ECH), TLS 1.3 protocol may split the Client Hello massage in...

fricci_FTNT · 12-19-2023

Description This article describes how to resolve an issue experienced on a 7000F series when the CLI on the FIM shows a mismatch message 'Error: FIM1 and FIM2 boardtype mismatch detected!' during the boot process: ----------------------------------R...

fricci_FTNT · 10-19-2023

Description This article describes how to power-off/power-on any slot on a FortiGate 7000 series from the Shelf Management Module (SMM). This procedure may be useful in situations where one or more FPMs did not restart correctly following a power out...

fricci_FTNT · 03-03-2025

Hi,Please check this Community article: https://community.fortinet.com/t5/FortiSwitch/Technical-Tip-Clarification-on-FortiSwitch-FS-M426E-FPOE-and/ta-p/380106 Best regards,

fricci_FTNT · 01-22-2025

Hello @spmbalamurugan ,If my understanding is correct, your ISP has provided you a /29 subnet that you can use for your internal servers. If that is the case, you can configure a VIP on your FortiGate that will forward traffic from that VIP to your w...

fricci_FTNT · 10-30-2024

Hi @Gumo ,No need to restart the firewall after running that command. Thank you,

fricci_FTNT · 10-30-2024

Hi @Gumo , I can see that you have only one FortiSwitch connected. The Lockdown ISL option applies only to ISL or ICL links. If the FortiGate does not detect any ISL or ICL the command "diagnose switch-controller switch-recommendations fabric-lockdow...

fricci_FTNT · 07-25-2024

Hi @Asyraf , You may have gone already through the initial troubleshooting process explained in the article below:https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-How-to-gather-information-and-fix-high-CPU-and-Mem/ta-p/197534 If yes, ple...

User Statistics

User Activity

Technical Tip: How to make sure that FortiGate does not inspect GTP traffic after a GTP profile is removed from a firewall policy

Technical Tip: Clarification on FortiSwitch FS-M426E-FPOE and UPoE 802.3bt support.

Technical Tip: How to block TLS 1.3 Encrypted Client Hello (ECH) in FortiGate firewalls

Troubleshooting Tip: How to resolve issue when CLI message 'Error: FIM1 and FIM2 boardtype mismatch detected!' is showed on a 7000F series

Technical Tip: How to restart FPMs/FIMs through the SMM module on a FortiGate 7000 series.

Re: How to activate 802.3bt in fortiswitch-m426e-fpoe

Re: Need to configure WAN side LAN IPs under firewall

Re: How to disable Lockdown ISL

Re: How to disable Lockdown ISL

Re: FortiAnalyzer CPU Usage High

Technical Tip: How FortiGate calculates BFD timers...

Technical Tip: How to block TLS 1.3 Encrypted Clie...

Troubleshooting Tip: How to troubleshoot PSU failu...

Technical Tip: Clarification on FortiSwitch FS-M42...

Technical Tip: How to configure SNMP v3 on HA clus...

Re: FortiAnalyzer CPU Usage High

Re: power button continuously flashing green issue

Re: How to see if DNS server send a NXDOMAIN error

Re: How to see if DNS server send a NXDOMAIN error

Re: Microsoft certificates re-signed as untrusted

KCS

Fortinet Training Institute

User Statistics

User Activity

You are leaving our website